Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
ECH tests - any way to include some without having to add an ECH-enabled TLS server?
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Stephen Farrell <stephen.farrell_at_cs.tcd.ie>
Date: Wed, 15 Jan 2025 13:34:19 +0000
Hiya,
I'd like to add some tests that exercise the experimental ECH feature,
but haven't done anything much on that as it seems like it'd be a lot
of work to add an ECH-enabled TLS server to the test harness. So I'm
looking for ideas on what to do there if someone has any...
One possibility, but maybe a bad idea, might be to use lightttpd as a
server - that now also has experimental ECH code, but downloading and
building that as part of a curl test also seems a bit OTT.
Using an external server could be done, but is obviously vulnerable to
bitrot, e.g. cloudflare changed their test URL for ECH a while back,
and while I'm fine with keeping defo.ie (and/or test.defo.ie) servers
running, that's probably not a great long-term approach.
So, ideas welcome...
Thanks,
S.
Received on 2025-01-15
Date: Wed, 15 Jan 2025 13:34:19 +0000
Hiya,
I'd like to add some tests that exercise the experimental ECH feature,
but haven't done anything much on that as it seems like it'd be a lot
of work to add an ECH-enabled TLS server to the test harness. So I'm
looking for ideas on what to do there if someone has any...
One possibility, but maybe a bad idea, might be to use lightttpd as a
server - that now also has experimental ECH code, but downloading and
building that as part of a curl test also seems a bit OTT.
Using an external server could be done, but is obviously vulnerable to
bitrot, e.g. cloudflare changed their test URL for ECH a while back,
and while I'm fine with keeping defo.ie (and/or test.defo.ie) servers
running, that's probably not a great long-term approach.
So, ideas welcome...
Thanks,
S.
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html
- application/pgp-signature attachment: OpenPGP digital signature